country checklist

European Union Voice AI calls.

Combine GDPR legal-basis, transparency, minimization, processor, retention, data-subject rights, and AI Act review for each member state and use case.

Pre-launch checklist

Use this to frame a legal and carrier review. It is not a substitute for advice on your campaign.

Not legal advice.Recheck every rule and source before launch.
  1. 01

    Choose and document a legal basis

    Identify the GDPR legal basis for contact data, transcripts, recordings, tool results, and model processing before launch.

  2. 02

    Inform the caller

    Explain the purpose, responsible controller, recipients, retention, rights, and recording behavior in an accessible notice.

  3. 03

    Disclose AI interaction

    Review AI Act Article 50 transparency duties and effective dates for direct interaction with natural persons.

  4. 04

    Minimize and retain deliberately

    Do not keep raw audio, full transcripts, or tool payloads merely because storage is inexpensive.

  5. 05

    Map processors and transfers

    Record every carrier, model vendor, hosting region, subprocessor, and international transfer mechanism.

  6. 06

    Test rights handling

    Make access, objection, erasure, and restriction requests executable across recordings, transcripts, embeddings, and analytics.

Read the regulator material

Guidance can change. Follow the current source before making a legal decision.